Microsoft Patch Tuesday security updates for February 2025 ficed 2 actively exploited bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-21194 | Microsoft Surface Security Feature Bypass Vulnerability | 7.1 | <1% | ||
| CVE-2025-21377 | NTLM Hash Disclosure Spoofing Vulnerability in Windows and Windows Server | 6.5 | 24% | ||
CVE-2025-21418+1 related CVE | Local Privilege Escalation via Heap Overflow in Windows WinSock AFD Driver | 7.8 group max | 2% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
Microsoft Patch Tuesday security updates for February 2025 addressed four zero-day flaws, two of which are actively exploited in the wild. Microsoft Patch Tuesday security updates for February 2025 addressed 57 vulnerabilities in Windows and Windows Components, Office and Office Components, Azure, Visual Studio, and Remote Desktop Services.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.